https://ictkb.com/upgrade-paloalto-firewall-in-ha-mode/